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Introduction 

This paper develops a technique for estimating 
software reliability using the Moranda geometric de- 
eutrophication model (ref. 1). The major premise of 
Moranda’s model with respect to software reliability 
is that the failure rate of the software decreases in a 
geometric progression as bugs (design flaws and cod- 
ing errors) are removed from the software, and this 
decreasing failure rate implies growth in the reliabil- 
ity. Work in the area of software reliability-growth 
models has largely emphasized estimation of only the 
model parameters by least-squares estimation (ref. 2) 
or maximum-likelihood techniques. However, only 
single point estimates and asymptotic approxima- 
tions for reliability are directly attainable from the 
estimates of the model parameters. The emphasis 
of this work is on extending the estimation proce- 
dures for a software reliability-growth model. The 
estimation procedures are extended by developing 
confidence limits for reliability and prediction limits 
for the time to the next failure based on Moranda’s 
model. 

Since confidence and prediction limits for relia- 
bility are not directly obtainable from the estimates 
of the model parameters, a technique called the piv- 
otal method is utilized. The pivotal method allows 
a straightforward construction of exact bounds with 
an associated degree of statistical confidence about a 
desired quantity. In this case, the desired quantity is 
the reliability of the software. The confidence limits 
derived in this paper provide a precise means of as- 
sessing the quality of software. The limits take into 
account the number of bugs found while testing and 
the effects of sampling variation associated with the 
random order of discovering bugs. 

To use the geometric de-eutrophication model and 
the pivotal method to construct the limits, the envi- 
ronment for gathering the necessary software failure 
data for the model must be specified. The testing and 
development process assumed in this paper consists 
of inputting a series of randomly selected test cases 
to the software and correcting bugs as they occur. 
No assumptions beyond proper repair of the identi- 
fied bug are made as to whether new bugs are intro- 
duced during repair. Interest is primarily focused on 
the times X\, X 2 , . . . , X n between detecting bugs 
where n is the total number of bugs found. In gen- 
eral, as more bugs are repaired, the interfailure times 
Xi, X 2 , . . . are expected to increase. 

Moranda’s geometric de-eutrophication model is 
used here to model the interfailure times resulting 
from the described testing process. The model is fully 
defined in the next section and the model parame- 
ters are estimated using maximum-likelihood tech- 


niques. Then, the pivotal approach to statistical 
estimation is presented and used to derive the equa- 
tions for the confidence limits for reliability and the 
prediction limits for the time to the next failure. 
The accuracy of asymptotic approximations to both 
the confidence and prediction limits is also exam- 
ined. Further, the effect of departures from the as- 
sumed exponentially distributed interfailure times in 
the model is investigated by simulating interfailure 
times from Pareto, Weibull, and gamma distribu- 
tions. Through this simulation the sensitivity of the 
model to the interfailure-time distribution will be 
demonstrated. 

I am grateful to Larry D. Lee of Old Dominion 
University (formerly of the Langley Research Center) 
for his technical guidance and development of the 
pivotal functions used in this work. 

Symbols 

A 2x2 covariance matrix for a limiting 

normal distribution 

dij element (z , j ) of A matrix (i,j — 1,2) 

F() cumulative distribution function 

/() probability density function 

L c lower confidence limit for reliability 

L p lower prediction limit for time to next 

failure 

Mz () moment-generating function for random 
variable Z 

n number of bugs found in software 

P r () probability function 

Q pivotal function used to define S and T 

Rn{y) reliability at time y after n bugs have 
been found in software 

R n {y) estimator of Rn{y) 

S pivotal function for estimating time to 

next failure 

Si percentage point of S distribution 

T pivotal function for estimating reliability 

ti percentage point of T distribution 

U c upper confidence limit for reliability 

Up upper prediction limit for time to next 

failure 

v dummy variable 

W pivotal function used to define S and T 

X % random variable for time between detect- 

ing the (i — l)st and zth bugs 


specific time between detecting the 
(i - l)st and zth bugs 

y operational time of software 

Z z random variable from standard exponen- 

tial distribution 

Zi specific value for Z x 

1 — a confidence coefficient for confidence and 
prediction limits 

0 parameter of geometric de-eutrophication 

model 

0 maximum-likelihood estimator of 0 

7 parameter of geometric de-eutrophication 

model 


The model is completely defined by adding the as- 
sumption that X \ , X 2 , . . . , X n are independent and 
exponentially distributed. The 0 parameter governs 
the rate at which increases or decreases. Note that 
as i increases, 0(i — 1 ) becomes the dominating term 
in the failure rate function. For 0 > 0, the failure 
rate decreases and reliability growth is implied. Us- 
ing the above assumptions, the probability density 
function of each interfailure time X x is given as 

f{xi) = A ie~ XiXi 

Maximum-likelihood techniques are then used to 
estimate the model parameters. From the assump- 
tion of independent and exponentially distributed 
interfailure times, the likelihood function given a set 
of interfailure times x\, X2, . . . , x n is 


7 maximum-likelihood estimator of 7 

6 parameter for Pareto distribution 

\i failure rate of software after i — 1 bugs 

have been found 

a 2 () statistical variance of a variable 


f[ (1) 

i=l 

The maximum-likelihood estimators 7 and 0 (given 
in a slightly different form by Moranda) are the 
solutions to 


</> parameter for Weibull distribution 

0 parameter for gamma distribution 

Geometric De-Eutrophication Model and 
Parameter Estimation 


7 = —In 


n 


■’E-ie* 1 ' 


1=1 




\ ( 2 ) 


i= 1 


The Moranda geometric de-eutrophication model, 
which has been studied previously in the context 
of software reliability, is described in this section. 
The geometric de-eutrophication model is a relatively 
simple reliability-growth model that has been popu- 
lar for describing the failure rate of software. The 
principal assumptions of the model are that the in- 
terfailure times are exponentially distributed and the 
failure rate of the software decreases in a geometric 
progression with each failure. Intuitively, one would 
expect the failure rate of the software to decrease as 
the testing process continues. Correspondingly, the 
reliability of the software is expected to increase as 
the rate at which failures occur diminishes. The geo- 
metric de-eutrophication model uses the interfailure 
times from the testing process to determine the fail- 
ure rate of the software and, consequently, the growth 
in the reliability. 

The interfailure times Ai, A 2 , ... are modeled 
using the assumption that the failure rate of the 
software after i — 1 bugs are removed is 

(1 = 1 , 2 , ...) 


Estimates of these parameters can be evaluated nu- 
merically from equations ( 2 ) by knowing only the 
interfailure times. If 0 > 0, reliability growth in 
the software is implied. From these estimates of the 
model parameters, single point estimates of reliabil- 
ity are possible. However, estimators that possess a 
degree of statistical confidence are desired, and these 
estimators are obtained by utilizing a pivotal func- 
tion approach. 

Pivotal Functions and Confidence Limits 

Confidence and prediction limits are developed in 
this section to provide interval estimators of software 
reliability and the time to the next failure. Confi- 
dence limits are developed since they give a sense 
of assurance in the accuracy of estimating the reli- 
ability and the time to the next failure as opposed 
to single point estimators. The confidence coefficient 
associated with the limits, denoted by 1 — o, gives 
the percentage of time, in repeated sampling, that 
the constructed limits will contain the parameter of 
interest. If the confidence coefficient is high, one can 
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be highly confident that the limits contain the true 
parameter of interest. 

Since exact confidence and prediction limits are 
not direct results from the estimation of the model 
parameters, the pivotal method is used to construct 
both the confidence and prediction limits. The piv- 
otal method hinges on defining a function that pos- 
sesses the following two properties: (1) the function 
is an association of the sample observations (inter- 
failure times in this case) with an unknown quantity 
of interest, say 0, where 6 is the only unknown quan- 
tity (here, 0 represents reliability and the time to the 
next failure); and (2) the function has a probability 
distribution that is independent of 9 (ref. 3). If the 
distribution of the pivotal function can be obtained 
by using analytic derivation, simulation, or any other 
means, the limits can be constructed from that distri- 
bution. The Student’s t statistic is a familiar example 
of a pivotal function. 

In this section two pivotal functions, S and T, 
based on the maximum-likelihood estimators of the 
model parameters, are defined from which the con- 
fidence and prediction limits will be derived. The 
distributions of these pivotals seem analytically in- 
tractable, so no attempt is made to derive them. 
However, the distributions can be ascertained by sim- 
ulation since the pivotal functions used here can be 
represented as implicit functions of independent stan- 
dard exponential variates that can be randomly gen- 
erated. The simulation will be discussed in further 
detail after the theoretical development of the pivotal 
functions. 

Using the estimators of the model parameters 7 
and f3 in equations (2), the quantities W = 7 — 7 and 
Q = (3 — (3 can be defined; these functions provide 
the foundation for generating the pivotal functions 
S and T needed to construct the confidence limits. 
The quantities W and Q are also pivotal functions 
since their sampling distributions are independent of 
7 and (3. To see this, let Zi, Z2, . . . , Z n be indepen- 
dent random variables having a standard exponential 
distribution with a probability density function e~ z 
where z > 0. Using moment-generating functions, it 
can be shown that the quantity where 

i — 1, 2, . . . , n has a distribution identical to that of 
X{. It follows from the moment-generating function 
of Zj, that is, 


quantity Z^e U must be 

which is equivalent to the density of JQ. Substituting 
for each in equations (2) yields the following 
representations: 


W = -In 


n 


-^e 


-Q(i-l) 


l—l 


(3) 


Zi [i - 1 - (n - l)/2] e = 0 

2=1 


Although inference about 7 and (3 is now possible 
on the basis of W and Q, the estimation effort is 
extended by using W and Q as building blocks of 
other pivotal functions germane to reliability and the 
time to the next failure. 

Given W and Q, consider the following pivotal 
which is a function of the time to the (n + l)st fail- 
ure and the estimated failure rate after n bugs have 
been removed from the software: 


S = x n+ le" 7 Pn (4) 


Note that S is composed of the quantity of interest 
(the time to the next failure £ n +i) and a function of 
the sample observations (the failure rate after n bugs 
have been removed from the software A n +i, which 
can be calculated using 7 and (3 from equations (3)). 
The distribution of S can be written in terms of stan- 
dard exponential variates as in the following equation 
so that the distribution can be easily simulated: 

5 = z n+1 e w ~ n Q (5) 


Once the percentage points of S are determined, 
prediction limits for the time to the (n + l)st failure 
can be obtained. From the S distribution, percentage 
points s\ and 52 can be identified such that 

P r («i < S < S2) = 1 — 0. (0 <a<l) 

It follows that 

P r (si < x n+ iei~P n <52) = 1 -Q! 




-1 


that the moment-generating function of Z t e 1 ' 1 

[ - 

1 — . Since each distri- 

bution has a unique moment-generating function, it 
follows that the probability density function of the 


From this probability statement the general equa- 
tions for the lower and upper prediction limits, de- 
noted respectively, by L p and f/ p , for are de- 

fined as 


L p = Sl e-^ n 
U p = s 2 e~^ n 


( 6 ) 
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where s\ < $2 are percentage points of 5, corre- 
sponding to some confidence level 1 — a. 

The same technique is used to generate confidence 
limits for reliability at a specified operational time y . 
In accordance with Musa (ref. 4), the reliability of 
software at a given time y > 0 after n bugs have 
been found, denoted by R n {y), is the probability of 
failure-free execution of the software for some time 
interval of length y. In terms of the model, reliability 
is defined as 

Rn(y) = e~ yel ~ 0n (7) 

Now, consider a function T defined in terms of 
the maximum-likelihood estimator Rn(y) (obtained 
by replacing 7 and (3 in eq. (7) by 7 and ( 3 ) where 

r=ln[lnA n (j/)/ln« n (j/)] (8) 

By manipulating equation (8), T can be written as 
7 — 7 — (/3 — ( 3 )n. Then, substituting the pivotal 
functions W and Q as before gives 

T = W -nQ (9) 

The sampling distribution of T is, thus, independent 
of the unknown parameters (7 and /?), which indi- 
cates that T is a pivotal function. Given that the dis- 
tribution of T can be determined, percentage points 
1 1 and t2 of the T distribution can be identified such 
that 


P r (f 1 < T < t 2 ) = 1 - a (0 < a < 1) 

Substituting the form of T in equation (8) into this 
probability statement gives 

Pr (<1 < In [in Rn{y)/ In R n {y) ] < <2} = 1 - a 

After some manipulation, lower and upper confidence 
limits, denoted by L c and U Cl respectively, for R n (y) 
are given as 


L c = e -y^ n ~ h | 

u c = e-y^ n ~ t2 J 


( 10 ) 


improbable. Hence, Monte Carlo techniques were 
employed to obtain the desired distributions. The 
simulation was implemented with the following al- 
gorithm for n = 5 to 100 (as shown in tables I 
and II): (1) randomly generate n + 1 of the standard 
exponentially distributed interfailure times, denoted 
earlier as Z\, Z 2, . . . , Z n . |_i, (2) solve for W and Q in 
equations (3), (3) calculate S and T (eqs. (5) and (9), 
respectively), (4) repeat steps (1) to (3) 100000 times 
to realize the two distributions, and (5) determine the 
percentiles of each distribution. A general purpose 
bisection method with a tolerance of 10 -6 was in- 
voked to solve for W and Q in equations (3). Tables I 
and II contain the simulated percentage points of the 
pivotal S and pivotal T distributions, respectively. 

Theoretically, asymptotic normality of the esti- 
mators of the model parameters could be used to 
construct asymptotically distribution-free confidence 
limits for reliability. Using asymptotic approxima- 
tions to estimate reliability would eliminate the need 
to construct pivotal functions and generate their dis- 
tributions as long as the asymptotic approximations 
are close to the true limits. The asymptotic approx- 
imations are often assumed to be adequate for es- 
timating reliability. However, the accuracy of the 
approximated limits is not assured in this case since 
the interfailure times are not identically distributed 
and n may not be large enough to justify the use of 
limiting distributions. 

By comparing the limiting distributions of each 
pivotal to its simulated sampling distribution, the ad- 
equacy of asymptotic approximations for this prob- 
lem can be studied. Using a central limit theorem 
and a weak law of large numbers, it is shown by Cox 
and Hinkley (ref. 5) that 7 and /?, as in equations (2), 
have limiting (n — > 00) normal distributions. In par- 
ticular, ^n 1//2 ( 7 — 7), n 3 / 2 (/? — /?)j converges in dis- 
tribution as n — > oc to a bivariate normal distribu- 
tion with a mean vector 0 and a 2 x 2 covariance 
matrix A where = 4 and a\2 = «2l — ^22 = 6. 
For large n, the A matrix is defined by 

an = 2(2n — 1 )/(n + 1) 

«12 = <*21 = 6n/(n -j- 1) 

022 = 12n 2 /[(n - l)(n + 1)] 


where t\ < £2 are percentage points of the pivotal T 
distribution chosen for a level of confidence 1 — a. 

Simulation and Large Sample 
Approximation 

As mentioned earlier, analytic derivation of the 
exact distributions of pivotal S and pivotal T seems 


Consequently, the asymptotic variances for large n 
are 

o' 2 (7) — 2(2n - l)/[n(n + 1)] « 4n _1 
o 2 { 0 ) = 12/[n(n + l)(n - 1)] % 12/n 3 
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Now, consider the sampling distribution for piv- 
otal T given in equation (9). Using the multivariate 8 
method as described in reference 6 (p. 493), it follows 
that 

n l/2 {W - nQ) = n l / 2 T 

converges in distribution to the normal with a mean 
of 0 and a variance of approximately 4. The 
convergence of r\}^T also implies that T converges 
in probability to 0; hence, e w ~ n Q converges in prob- 
ability to 1. Therefore, because Z n +\ is a standard 
exponential variable 

5 - Z n+l e w ~ n< 3 

has a limiting exponential distribution. So, a normal 
distribution and a standard exponential distribution 
are the asymptotic approximations for the T and 
S distributions, respectively. The convergence of 
T and 5 to these approximations is apparent when 
observing the percentage points in tables I and II. 

Using tables I and II and the asymptotic results 
above, the percentage points of the pivotal distribu- 
tions can be compared with their limiting distribu- 
tions to realize how close the approximate distribu- 
tions are to the true distributions. For n = 5, the 
95th percentile is 2.332 for the pivotal T distribu- 
tion and is 1.471 for the asymptotic approximation. 
However, for n = 100, the 95th percentile is 0.355 for 
the pivotal T as compared with 0.329 for the limiting 
normal. For n — 5, the 95th percentile point is 10.948 
for the pivotal S compared with 2.996 from the stan- 
dard exponential distribution; and, for n — 100, the 
95th percentile is 3.137 for the pivotal S as compared 
again with 2.996. Thus, it is obvious that for small 
values of n, the limiting distributions provide poor 
approximations to the true distributions. However, 
as n increases, the difference between the percent- 
age points of the limiting and pivotal distributions 
decreases along with the change in the limits. 

Because of the inadequacy of the asymptotic ap- 
proximations for small n, confidence and prediction 
limits based on the limiting distributions would be 
poor approximations for the true limits for small 
n. The inadequacy of the approximations when n 
is small is particularly significant since existing soft- 
ware testing data largely consist of relatively small 
sample sizes, with n > 50 being uncommon. Unless 
other approaches are considered, such as estimating 
the percentage points of the pivotal distributions by 
higher order approximation to their moments (see 
ref. 5, p. 282), the use of the simulated pivotal dis- 
tributions provides the best way of computing the 
confidence and prediction limits, especially for real 
data where n is small. 


Robustness 

In computing confidence and prediction limits 
based on the geometric de-eutrophication model, the 
interfailure times are assumed to be exponentially 
distributed. It has yet to be shown, though, that 
the interfailure times from a software testing process 
are exponentially distributed. Robustness, as con- 
sidered here, is concerned with- how well the limits 
cover the parameter of interest when the interfailure 
times are not exponentially distributed. The Pareto 
distribution, whose distributional shape is similar to 
the exponential but has a longer tail, has been sug- 
gested as a more realistic distribution for describing 
the behavior of the interfailure times (ref. 7). The 
Weibull and gamma distributions are also candidates 
since both take on a wide variety of shapes, including 
the exponential, by varying their parameter values. 
This investigation of robustness is limited to studying 
the effect of the different distributions on the predic- 
tion limits and considers interfailure times from the 
Pareto, Weibull, and gamma distributions. 

Monte Carlo techniques are again used to pro- 
duce interfailure times from the different distribu- 
tions. The simulation consisted of generating n + 1 
random variables representing the interfailure times 
Xi, X 2 , X n -j - 1 according to each of the three 
distributions and then scaling each X{ by a factor of 
1 ) where i— 1 , 2, . . . , n+ 1 . Prediction lim- 
its for the time to the (n-F l)st failure were computed 
from the first n variates using equations (6) and the 
percentage points from the S distribution. To real- 
ize the actual confidence level for these limits, this 
process was repeated 10000 times checking at each 
iterate to see if the (n -P l)st variate was contained 
in the prediction limits. 

The results of this simulation, found in table III, 
show that the distributional form of the interfailure 
times significantly affects the actual level of confi- 
dence of the prediction limits. Confidence levels for 
the limits in the case of Pareto (^-distributed in- 
terfailure times appear to converge to the expected 
90-percent level as 9 increases. Confidence levels in 
the Weibull ( 0 ) and gamma ( 0 ) cases, though, fall 
below the expected 90-percent level for 0 and 0 < 1 
and exceed the 90-percent level for 0 and 0 > 1 . 
Hence, the method appears robust with respect to 
Pareto (^-distributed interfailure times where 9 is 
large, but it does not appear robust for Weibull- and 
gamma-distributed interfailure times if their param- 
eter values are not close to 1. This result indicates 
that the model should be applied to cases where the 
interfailure times are determined to be exponentially 
distributed. 
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Concluding Remarks 

Pivotal functions are effective tools for deter- 
mining confidence limits for software reliability and 
prediction limits for the time to the next failure. 
The method of pivotal functions produces exact 
confidence and prediction limits with corresponding 
degrees of statistical assurance in the quality of the 
reliability estimates. The usual application of asymp- 
totic results for estimating the limits is inadequate 
as compared with the pivotal approach, especially 
when only a small number of bugs have been found 
during the testing process. Furthermore, the distri- 
butional form of the interfailure times does influence 
the confidence level of the prediction limits, but the 
limits derived by the method of pivotal functions ap- 
pear robust for a special case of Pareto-distributed 
interfailure times. Because of the sensitivity to the 
interfailure-time distribution, use of the Moranda 
model should be restricted to cases in which the in- 
terfailure times are exponentially distributed. 

NASA Langley Research Center 
Hampton, VA 23665-5225 
April 14, 1987 


References 

1. Moranda, P. B.: Prediction of Software Reliability Dur- 
ing Debugging. Proceedings 1975 Annual Reliability and 
Maintainability Symposium , IEEE Catalog Number 75 
CHO 918-3 RQC, Jan. 1975, pp. 327-332. 

2. Miller, Douglas R.; and Sofer, Ariela: Completely 

Monotone degression Estimates of Software Failure Rates. 
GWU/IMSE/Serial T-497/85 (Grant NAG-1-179), 
George Washington Univ., Jan. 18, 1985. (Available as 
NASA CR-174319.) 

3. Mendenhall, William; Scheaffer, Richard L.; and 
Wackerly, Dennis D.: Mathematical Statistics With Ap- 
plications, Second ed. Duxbury Press, c.1981. 

4. Musa, John D.: Software Reliability. Handbook of Soft- 
ware Engineering , C. R. Vick and C. V. Ramamoorthy, 
eds., Van Nostrand Reinhold Co., c.1984, pp. 392-412. 

5. Cox, D. R.; and Hinkley, D. V.: Theoretical Statistics. 
Chapman & Hall, Ltd., 1974. 

6. Bishop, Yvonne M. M.; Fienberg, Stephen E.; and 
Holland, Paul W.: Discrete Multivariate Analysis: The- 
ory and Practice . MIT Press, c.1975. 

7. Littlewood, B.; and Verrall, J. L.: Bayesian Reliability 
Growth Model for Computer Software. J. Royal Stat. 
Soc vol. 22, no. 3, 1973, pp. 332-346. 


6 



Table I. Percentage Points of Pivotal S Distribution 


•50.01 

s 0.05 

« 0.10 

■50.90 

s 0.95 

s 0.99 

0.0065 

0.0347 

0.0753 

5.864 

10.948 

39.417 

.0071 

.0381 

.0814 

4.889 

8.469 

25.470 

.0080 

.0412 

.0866 

4.340 

7.149 

19.417 

.0082 

.0429 

.0887 

3.935 

6.320 

15.911 

.0082 

.0431 

.0910 

3.669 

5.797 

13.641 

.0085 

.0453 

.0946 

3.488 

5.288 

11.725 

.0084 

.0450 

.0942 

3.337 

5.018 

10.949 

.0087 

.0449 

.0943 

3.241 

4.767 

9.842 

.0092 

.0471 

.0968 

3.121 

4.602 

9.508 

.0094 

.0467 

.0976 

3.072 

4.452 

8.663 


0.0474 
481 
484 
504 
498 
516 
506 


0.0989 
993 
013 
039 
024 
047 
049 


8.387 

7.147 

6.606 

6.117 

5.919 

5.661 

5.621 


5.417 

5.250 

5.165 

4.950 




Table II. Percentage Points of Pivotal T Distribution 


n 

*0.01 

*0.05 

*0.10 

*0.90 

*0.95 

*0.99 

5 

- 2.351 

- 1.613 

- 1.241 

1.772 

2.332 

3.522 

6 

- 2.049 

- 1.419 

- 1.095 

1.537 

2.021 

3.045 

7 

- 1.821 

- 1.267 

-.983 

1.369 

1.793 

2.676 

8 

- 1.685 

- 1.183 

-.916 

1.241 

1.624 

2.431 

9 

- 1.556 

- 1.093 

-.847 

1.143 

1.488 

2.219 

10 

- 1.461 

- 1.030 

- 0.799 

1.057 

1.381 

2.046 

11 

- 1.390 

-.972 

-.753 

.992 

1.296 

1.900 

12 

- 1.322 

-.931 

-.727 

.935 

1.221 

1.789 

13 

- 1.254 

-.884 

-.687 

.890 

1.153 

1.699 

14 

- 1.204 

-.850 

-.663 

.849 

1.105 

1.617 

15 

- 1.164 

- 0.821 

- 0.635 

0.807 

1.049 

1.534 

20 

-.993 

-.708 

-.553 

.680 

.879 

1.260 

25 

-.881 

-.626 

-.488 

.595 

.770 

1.123 

30 

-.808 

-.574 

-.448 

.534 

.691 

.997 

35 

-.749 

-.532 

-.415 

.487 

.631 

.907 

40 

\ 

o 

-.496 

-.386 

.455 

.588 

.840 

45 

-.657 

-.468 

-.365 

.424 

.547 

.789 

50 

- 0.623 

- 0.445 

- 0.346 

0.398 

0.512 

0.736 

60 

-.573 

-.407 

-.318 

.360 

.465 

.666 

70 

-.532 

-.378 

-.293 

.328 

.424 

.606 

100 

-.445 

-.313 

-.246 

.275 

.355 

.505 





Table III. Actual Confidence Levels of Prediction Limits for Time to Next Software Failure Given 
Pareto-, Weibull-, and Gamma-Distributed Interfailure Times 


Distribution 
of interfailure times 

Parameters 

Actual confidence level of 
90-percent prediction limits for 
time to the (n + l)st failure 

n — 5 

n — 15 

n — 30 

Modified Pareto (8): 

0 = 1.0 

0.702 

0.680 

0.680 

F{x ) = 1 - + 

0 = 2.0 

.812 

.809 

.818 

(where x > 0) 

0 = 5.0 

.873 

.869 

.870 


0 = 15.0 

.890 

.889 

.891 

Weibull (4>): 

00 

o 

fl 

-e- 

0.818 

0.825 

0.834 

F(x) = 1 - e~ x * 

<t> = 1.0 

.900 

.900 

.900 

(where x > 0) 

4 = 1 A 

.970 

.968 

.970 


<{> = 2.0 

.996 

.996 

.996 

Gamma (^): 

II 

O 

Or 

0.712 

0.728 

0.736 

F(x) =* Tty)- 1 f et-'e-tdt 

ip = 1.0 

.900 

.900 

.900 

(where x > 0) 

4 = 2.0 

.984 

.980 

.980 


*T(y) = v y x e v dv where y > 0. 
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